Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/m5j0IykqNamMIg-QzzAd1BAlhKE.mft
File:                     m5j0IykqNamMIg-QzzAd1BAlhKE.mft (raw, json)
Hash identifier:          HyhH5hK8uPBJAR562jLFe7xxufrQAO8h5CwsbFm2RCc=
Subject key identifier:   3A:2C:83:9F:20:E2:8E:3A:8D:24:1A:93:37:43:F7:59:9D:7F:87:9C
Authority key identifier: 9B:98:F4:23:29:2A:35:A9:8C:22:0F:90:CF:30:1D:D4:10:25:84:A1
Certificate issuer:       /CN=9b98f423292a35a98c220f90cf301dd4102584a1
Certificate serial:       018C7805F8E152BE81B079FCF4DE2A44540D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m5j0IykqNamMIg-QzzAd1BAlhKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/m5j0IykqNamMIg-QzzAd1BAlhKE.mft
Manifest number:          0A9B
Signing time:             Sun 17 Dec 2023 13:45:06 +0000
Manifest this update:     Sun 17 Dec 2023 13:45:06 +0000
Manifest next update:     Mon 18 Dec 2023 13:45:06 +0000
Files and hashes:         1: 7DNMSiclRBcZeuHDtXhw8cvw654.roa (hash: b+6y14Cid06pv2qKmr3JQ0sSDzGhdcP8BUGZxqpPkWU=)
                          2: 8_n1qKN7xZDIXlokyKKQZRvEyuw.roa (hash: oPxptZe6m2AE9xOF858XDmtp6b9+3aTDJLvBXk4hRac=)
                          3: 8ynVDdet8lNMgftzOcQRhxXmF1E.roa (hash: IutCggYEMA51OFNXmG9/yXWzahgajlK/VbI9hwSgH2w=)
                          4: J84vfTEmt9In1sWBVB17KhLEvSU.roa (hash: OHWH7AwVpVtA2aRk2+01eqDDSXs7qUA61OlZNdu0DaE=)
                          5: JdOTNyhkiLKM5FF43tDVqohD_vo.roa (hash: mfpCaeAkJAZ8f9LaRdws0P5RDsqAUnVyaugl0U8DK6A=)
                          6: LD-JecaPcqqq0EAbchhA3r15W40.roa (hash: KUWMI790ycc2cbHMuXRjOMf6pDBnohsTZHFooQwB+P0=)
                          7: RF1zL_Da-GSCYppphCtn6lmYcPU.roa (hash: HqRcJaM/nKq+YkVUzyqUWh5tTH9zx5rZPyqzNSW7Zko=)
                          8: _uJTq_Iz1sblNTOcf4uuuVTko2k.roa (hash: cNCtl8qTCWq85m4QW/uhucXrQVkfTdBXzZP8FdX1mug=)
                          9: ezpY9Le1g9IBOZQLNR5jN0dhBgI.roa (hash: plx3fYjPlpSjVP7nlSzgEIlbWYSyNzigT7Fb4E5q/cw=)
                          10: m5j0IykqNamMIg-QzzAd1BAlhKE.crl (hash: v+y88yyQH5satYXzcPfwHykcTrI1oUJOwyp6bfOkSck=)
                          11: rTYWpF5_d-l3Kc_Aj1WkXWY_lC4.roa (hash: 1ggXdl4LsKtgG9n7KW9aAkcIVW9W/jS+65czegsI90g=)
                          12: xPtLrdBipypengrag4x8EV22chI.roa (hash: e8oNgVF8qAJmmFaRNtWzL9yJSZki65XpFoHpBsnKgqs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:78:05:f8:e1:52:be:81:b0:79:fc:f4:de:2a:44:54:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b98f423292a35a98c220f90cf301dd4102584a1
        Validity
            Not Before: Dec 17 13:45:06 2023 GMT
            Not After : Dec 18 13:45:06 2023 GMT
        Subject: CN=3a2c839f20e28e3a8d241a933743f7599d7f879c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ce:80:dc:d3:11:9e:e9:a5:b9:7c:a4:ca:09:
                    a9:f6:76:2b:00:ad:58:fc:5f:11:a8:01:f4:01:99:
                    3d:2c:a4:8d:04:73:34:3d:08:cd:cf:fb:ae:c7:1b:
                    bc:e0:80:be:d6:48:e8:50:1e:2a:c9:10:d9:be:da:
                    12:a9:1d:80:3d:d8:f7:77:42:20:ea:95:00:e3:48:
                    dd:c5:7c:0b:b7:24:14:e6:58:fd:02:4c:c1:bc:db:
                    ca:60:cc:f1:88:f9:40:e6:1e:98:60:d1:35:f6:c9:
                    30:d8:fb:01:c0:cd:cb:a2:3c:39:87:46:d9:e3:d1:
                    29:27:7c:9d:67:ae:91:14:f8:05:4e:77:f7:5e:4e:
                    12:f1:c8:e2:b3:3e:41:8d:91:e2:41:a9:33:a0:47:
                    40:42:d9:3c:fa:59:f5:5c:26:74:36:e2:48:cd:13:
                    55:ab:a2:63:49:0a:7c:cd:15:eb:ee:1f:8c:6c:8a:
                    cd:6c:52:0c:56:4e:04:52:6a:4a:58:73:4d:f7:29:
                    71:c1:d6:1f:00:c0:0a:71:ed:21:c0:7d:8e:ec:4f:
                    20:a0:f1:79:1b:26:6f:3b:b1:4f:c0:d6:7e:d5:51:
                    1e:05:38:7b:86:4e:2c:c4:f9:09:36:e7:9a:71:1d:
                    fd:a1:fe:ab:9c:94:74:bc:86:58:2d:97:9e:95:2c:
                    f3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:2C:83:9F:20:E2:8E:3A:8D:24:1A:93:37:43:F7:59:9D:7F:87:9C
            X509v3 Authority Key Identifier:
                keyid:9B:98:F4:23:29:2A:35:A9:8C:22:0F:90:CF:30:1D:D4:10:25:84:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5j0IykqNamMIg-QzzAd1BAlhKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/m5j0IykqNamMIg-QzzAd1BAlhKE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/m5j0IykqNamMIg-QzzAd1BAlhKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:86:6d:ce:58:81:5b:98:4e:64:0d:cf:7f:56:75:38:c5:e4:
         52:bf:9e:18:01:bf:50:23:a8:0b:a1:cb:dd:48:78:e3:57:a2:
         2a:62:b6:25:be:c1:8a:d1:f8:91:0c:c8:ee:62:1c:87:0d:22:
         06:4d:3c:cd:13:7a:4f:2f:41:41:3f:63:07:8f:b6:08:7f:76:
         19:f2:89:8e:9d:07:3f:84:25:1b:42:d3:3a:c8:52:96:99:ec:
         84:82:57:f3:03:6f:4e:e2:03:5c:63:02:fa:41:9f:0d:01:2b:
         67:ae:6e:97:04:33:4d:a9:56:30:64:87:af:57:04:d4:bf:e9:
         02:10:f1:bb:1b:78:05:58:3e:f5:3a:54:c2:5f:14:df:2e:63:
         d8:61:84:c4:a6:d0:41:2d:92:c8:dd:80:c2:5d:43:5e:4b:49:
         f2:7a:a8:ab:0f:e9:05:49:08:e4:83:ec:18:a3:90:5c:ff:7c:
         39:16:2a:83:07:f4:fe:8f:8f:90:ae:95:dd:46:68:20:d5:7e:
         bf:92:ad:f6:cd:57:f2:fa:56:bf:16:f6:96:93:0a:72:ea:3c:
         cc:61:49:01:89:fe:9f:3a:8c:89:50:46:b4:14:71:21:60:05:
         f5:5d:d5:b0:0a:dd:1d:88:5b:a8:c3:42:23:fc:9b:49:e6:9c:
         85:fa:cc:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 17 16:25:44 2023 by rpki-client on console-ams.rpki-client.org